[Samba] ADS domain member: winbind fails [SOLVED]

[Rowland Penny]

On Sun, 1 Jan 2017 15:14:19 +0100
"Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:

> Am 2017-01-01 um 14:40 schrieb Rowland Penny via samba:
> 
> > If a user has a uidNumber, this will be used on a DC instead of the
> > xidNumber stored in idmap.ldb, though you may have to run 'net cache
> > flush'
> 
> "net cache flush" threw me back on the member server now :-(
> 
> Maybe I shouldn't have done that, maybe it's good to uncover some
> hidden issue(s).

'net cache flush' clears winbind's cache, but this should be refilled
the next time winbind connects to AD.
> 
> # wbinfo -i sgw
> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
> Could not get info for user sgw
> 
> # wbinfo -n sgw
> S-1-5-21-2777655458-4002997014-749295002-3000 SID_USER (1)
> 
> # wbinfo -S S-1-5-21-2777655458-4002997014-749295002-3000
> failed to call wbcSidToUid: WBC_ERR_DOMAIN_NOT_FOUND
> Could not convert sid S-1-5-21-2777655458-4002997014-749295002-3000
> to uid
> 
> # wbinfo -u | grep sgw
> sgw
> 
> *scratches head*  ... again
> 
> 

The problem with using wbinfo is, it isn't what the underlying OS uses,
you need to use 'getent' for this.

Just seen you latest post, moving to that

Rowland